5 matches found
GHSA-XGMH-RVPW-6498 Reflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS Plugin
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
Cross site scripting
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
CVE-2018-1000108
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...
PT-2018-9287
Name of the Vulnerable Software and Affected Versions: Jenkins CppNCSS Plugin version 1.1 and earlier Description: A cross-site scripting issue exists in the AbstractProjectAction/index.jelly file, allowing an attacker to create links to Jenkins URLs that execute arbitrary JavaScript code in the...
CVE-2018-1000108: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed...